Skip to content

Upgrade urllib3 dependency to 2.6.3#520

Merged
moshemorad merged 1 commit into
mainfrom
claude/fix-urllib3-cve-6PAkI
Apr 30, 2026
Merged

Upgrade urllib3 dependency to 2.6.3#520
moshemorad merged 1 commit into
mainfrom
claude/fix-urllib3-cve-6PAkI

Conversation

@naomi-robusta
Copy link
Copy Markdown
Contributor

Summary

This pull request updates the urllib3 dependency to version 2.6.3 across the project's dependency specifications.

Changes

  • Updated urllib3 version constraint in pyproject.toml from ^2.6.2 to ^2.6.3
  • Updated urllib3 pinned version in requirements.txt from 2.6.2 to 2.6.3

Notes

This is a patch-level version bump that maintains compatibility with the existing caret constraint in pyproject.toml. The lockfile has been updated accordingly to reflect the new dependency resolution.

https://claude.ai/code/session_019Hrc2h44LQ6HbC5m2tatZr

Vulnerable range: >= 1.22, < 2.6.3. Minimum patched version is 2.6.3.
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 30, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 3ad38618-5324-4697-bf7f-fabaf4f705c7

📥 Commits

Reviewing files that changed from the base of the PR and between e46b387 and 7c304eb.

⛔ Files ignored due to path filters (1)
  • poetry.lock is excluded by !**/*.lock
📒 Files selected for processing (2)
  • pyproject.toml
  • requirements.txt

Walkthrough

Updates the urllib3 dependency constraint from version 2.6.2 to 2.6.3 across project manifest files to allow the newer patch release.

Changes

Cohort / File(s) Summary
Dependency Version Update
pyproject.toml, requirements.txt
urllib3 version bumped from 2.6.2 to 2.6.3 in both Poetry configuration and pinned requirements for Python >=3.10,<3.13.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested reviewers

  • arikalon1
  • Sheeproid
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: upgrading urllib3 to version 2.6.3, which matches the core objective of this dependency update pull request.
Description check ✅ Passed The description is directly related to the changeset, providing clear details about which files were modified and how the urllib3 dependency was updated across the project.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch claude/fix-urllib3-cve-6PAkI

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
Review rate limit: 7/8 reviews remaining, refill in 7 minutes and 30 seconds.

Comment @coderabbitai help to get the list of available commands and usage tips.

@moshemorad moshemorad merged commit 4465a10 into main Apr 30, 2026
3 checks passed
@moshemorad moshemorad deleted the claude/fix-urllib3-cve-6PAkI branch April 30, 2026 10:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants